New Okta Platform Innovations Extend Identity Security Fabric to Non-Human Identities in an Agentic AI Future

Rhea-AI Summary

Okta (NASDAQ: OKTA) has announced new platform capabilities to secure AI agents and non-human identities with the same level of security as human identities. The enhancement comes as Deloitte forecasts that by 2027, 50% of companies using GenAI will adopt agents.

The key innovations include:

• Identity Security Posture Management and Okta Privileged Access for protecting AI agents and non-human identities
• Separation of Duties (SoD) in Okta Identity Governance to prevent security risks
• Secure Device Features under Okta Device Access and Adaptive MFA
• Secure Identity Integrations for business-critical applications
• On-prem Connector for integrating on-premises apps with Okta Identity Governance

These updates address critical security challenges, as only 15% of organizations reported confidence in securing non-human identities last year. The platform aims to provide unified security framework for managing both AI and human identities across enterprise ecosystems.

Positive

• Launch of comprehensive security features for managing AI and non-human identities
• Strategic positioning for growing AI adoption market
• Introduction of Secure Identity Integrations for critical business applications
• Enhanced security capabilities with Zero Trust policies implementation

Negative

• Only 15% of organizations currently confident in securing non-human identities
• Some announced features still under development or in early access

Insights

Cybersecurity Expert

Okta's platform expansion to secure non-human identities represents a critical evolution in identity security as organizations rapidly adopt AI agents. With Deloitte forecasting that 50% of companies using GenAI will adopt agents by 2027, Okta is strategically positioning itself ahead of a significant market shift.

The security challenges of non-human identities are substantial – they typically lack MFA, use static credentials, and possess excessive privileges. That only 15% of organizations feel confident in securing these entities highlights a substantial security gap that Okta is addressing.

The new capabilities form a comprehensive solution: Identity Security Posture Management for discovering and monitoring non-human identity risks, Privileged Access controls extending Zero Trust principles to machine identities, Separation of Duties enforcement for compliance, and Secure Device Features that reduce MFA fatigue while enhancing protection.

Particularly valuable is Okta's extensible approach through Secure Identity Integrations, which allows security teams to implement deep protections across critical applications like Google Workspace and Microsoft 365. This addresses the reality that most organizations operate heterogeneous environments where identity sprawl creates significant attack surface expansion.

By unifying human and non-human identity security within a single fabric, Okta eliminates security silos that attackers exploit while providing the visibility and governance essential for managing the exploding digital workforce.

Enterprise Technology Strategist

Okta's enhanced platform capabilities arrive at a pivotal moment as businesses navigate the operational complexities of managing growing digital workforces alongside human employees. This initiative addresses a critical business challenge – the projected explosion of non-human identities that will require the same rigorous security oversight as traditional users.

The strategic timing is noteworthy. By entering this space as AI agent adoption accelerates, Okta is establishing itself as a frontrunner in a security category that will become increasingly essential. The integrated identity security fabric approach provides organizations substantial operational advantages – unified visibility, consistent policy enforcement, and reduced management overhead across all identity types.

For enterprises building AI agent capabilities, this development removes a significant security obstacle. The availability of governance controls like Separation of Duties and continuous monitoring for non-human identities directly addresses compliance requirements that might otherwise slow adoption.

Okta's integration-first approach with its Secure Identity Integrations is particularly valuable for enterprise environments, where security must span across disparate systems. The GA availability of integrations for business-critical applications like Salesforce and Microsoft 365 means organizations can immediately strengthen security posture for their most sensitive environments.

This platform expansion demonstrates Okta's understanding that as AI transforms workforces, identity security must evolve from purely human-centric models to comprehensive frameworks encompassing all entities accessing enterprise resources.

LONDON--(BUSINESS WIRE)-- Okta, Inc. (NASDAQ: OKTA), the leading independent Identity partner, today announced new Okta Platform capabilities to help businesses secure AI agents and other non-human identities with the same level of visibility, control, governance, and automation as human ones. The Okta Platform will now bring a unified, end-to-end identity security fabric to organizations for managing and securing all types of identities across their ecosystem, from AI agents to API keys to employees.

Why it Matters:

• The number of non-human identities is set to grow exponentially, with Deloitte¹ forecasting that by 2027, half of all companies using GenAI will also adopt agents in some capacity. Some companies have already begun deploying hundreds of AI-SDRs and thousands of customer service agents.
• Non-human identities (i.e., service accounts, shared accounts, break-glass identities, API keys, access tokens, and automation tools) are inherently difficult to secure because they are often non-federated, lack MFA, and have static credentials that aren’t regularly rotated. These factors, combined with excessive privileges and a high blast radius, create an attractive attack vector for adversaries.
• Last year, only 15% of organizations² said they remain confident in their ability to secure them.
• With more types of identities, machines, and agents trying to access increasingly critical data and resources, across larger numbers of devices, organizations will be faced with managing this added complexity and identity sprawl.
• Now more than ever, organizations will need to implement an identity security fabric, which is defined as a unified framework for securing, managing, and governing both non-human and human identities across ecosystems at scale.

“Amid the excitement of embracing the next wave of generative AI, companies are moving quickly to deploy agentic use cases, often overlooking the critical need to secure these systems and control the sprawl of non-human identities,” said Arnab Bose, Chief Product Officer, Okta Platform at Okta. “By bringing these identities into the identity security fabric, the Okta Platform can help organizations secure the rising digital labor force with the same rigor and vigilance as the human workforce.”

Comprehensive Identity Security Capabilities for Managing Every Type of Identity

The rapid adoption of cloud services, SaaS applications, remote work, and now the rise of non-human identities has transformed the security landscape. Homogeneous tech stacks don’t exist, and would present their own set of security risks.

This fragmentation creates complexity, gaps in security tools, and an expanded attack surface, making it harder for security teams to maintain a holistic view of their security posture. An extensible identity security fabric enables organizations to build best-in-breed stacks and connect disparate security tools across the enterprise. However, to be effective, companies need the right identity tools, including posture management, threat protection, privileged access, governance, device access, and more.

With new and enhanced Okta Platform capabilities, organizations can have more comprehensive security for all identities—human and non-human—with solutions that are seamlessly interconnected and fully integrated across the business.

What’s New – Identity Security Posture Management and Okta Privileged Access

New capabilities for Identity Security Posture Management and Okta Privileged Access provide companies with a comprehensive, end-to-end solution for protecting AI agents and other non-human identities, including service accounts, shared accounts, break-glass identities, API keys, access tokens, and automation tools.

Organizations can better discover, secure, and manage non-human identities, while ensuring AI-driven automation and machine-to-machine interactions remain governed under Zero Trust policies. These tools also continuously monitor NHI risks and vulnerabilities.

What’s New - Separation of Duties

Available today for customers in GA preview, Separation of Duties (SoD) in Okta Identity Governance (OIG) helps ensure that users do not accumulate conflicting access permissions that could introduce security risks or compliance violations. By enforcing SoD policies based on pre-defined business rules, SoD helps organizations prevent fraud, maintain regulatory compliance, and reduce the risk of insider threats.

What’s New – Secure Device Features

Available today for customers in Early Access, Okta is releasing new Secure Device Features under Okta Device Access and Adaptive MFA that minimize MFA fatigue and the risk of credential theft by seamlessly integrating device context and hardware protection for Zero Trust access control. These features integrate with the customer’s ecosystem of tools to gather signals that inform access policies and continuous risk assessment and enforcement.

Protecting Identities, Across Every Application and Environment

Since no enterprise today has a fully homogeneous tech stack, organizations need deep and secure identity integrations into every single application they use. This approach unifies user context, resources, policies and risk signals across infrastructure, apps, APIs, and more regardless of the identity types.

What’s New - Secure Identity Integrations (SII)

Generally available today for customers, Okta Secure Identity Integrations provide an unprecedented level of comprehensive, out-of-the-box security integrations for the most business-critical applications. Now available as a collection in the Okta Integration Network, companies can quickly configure deep integrations for applications, like Google Workspace, Microsoft 365, and Salesforce, that go beyond SSO and lifecycle management to manage user privileges, uncover hidden risks, and rapidly contain threats with built-in remediation and universal logout.

Other New Innovations:

• On-prem Connector: Available today for customers in Early Access, Okta On-prem Connector is a new out-of-the-box connector that allows customers to integrate their on-premises apps with Okta Identity Governance, enabling the discovery, visibility, and management of fine-grained application entitlements within Okta.

¹ Autonomous generative AI agents: Under development, Deloitte, November 19, 2024.
² CSA and Astrix Research: The State of Non-Human Identity Security, Cloud Security Alliance and Astrix, September 12, 2024.

Disclaimer: Any products, features, functionalities, certifications, authorizations, or attestations referenced in this material that are not currently generally available or have not yet been obtained or are not currently maintained may not be delivered or obtained on time or at all. Product roadmaps do not represent a commitment, obligation or promise to deliver any product, feature, functionality, certification or attestation and you should not rely on them to make your purchase decisions.

About Okta

Okta, Inc. is The World’s Identity Company™. We secure Identity, so everyone is free to safely use any technology. Our customer and workforce solutions empower businesses and developers to use the power of Identity to drive security, efficiencies, and success — all while protecting their users, employees, and partners. Learn why the world’s leading brands trust Okta for authentication, authorization, and more at okta.com.

View source version on businesswire.com: https://www.businesswire.com/news/home/20250409043803/en/

Media Contact:

Kyrk Storer

press@okta.com

Source: Okta, Inc.

FAQ

What new security features has Okta (OKTA) introduced for AI agents?

Okta has introduced Identity Security Posture Management and Privileged Access features to protect AI agents and non-human identities, ensuring Zero Trust policies and continuous monitoring of risks.

How many companies are expected to adopt AI agents by 2027 according to Deloitte?

According to Deloitte's forecast, 50% of companies using GenAI will adopt agents in some capacity by 2027.

What is the current confidence level in securing non-human identities?

Only 15% of organizations reported confidence in their ability to secure non-human identities last year.

What are the main components of Okta's new platform update?

The main components include Identity Security Posture Management, Privileged Access, Separation of Duties, Secure Device Features, Secure Identity Integrations, and On-prem Connector.

How does Okta's new Separation of Duties (SoD) feature work?

SoD in Okta Identity Governance enforces policies based on pre-defined business rules to prevent fraud, maintain compliance, and reduce insider threats by preventing conflicting access permissions.